- t o p obonet aeons — 



7 May 1951 



REPORT- BY THE TECHNICAL COiSGTTEE 
to the 

EXECUTIVE COMMITTEE 
of the 

g.X.-P.S. CONFERENCE ON SECURITY OF FRENCH CCXjMUNICATIOSfS 

THE PROBLEM 

I. To examine present French cryptographic systems and procedures, and 
to formulate a U.S.-U.K. plan for improvement of the security thereof. 



FACTS BEARING ON THE PROBLEM ARP DISCUSSION 
2. See Enclosure "B". 



CONCLUSIONS 

3. It is concluded that: 
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jb. The present French cryptographic organizations do not possess the 
necessary crypieaalytic appreciation to insure provision of systems afford- 
ing adequate cryptographic security, or, If they do possess the requisite 
knowledge, the information is not being applied or properly employed. 

c. This situation can be improved only by a relatively complete ovex. v » 
haul of -the French cryptographic systems end practices. The present in- 
secure French cryptographic systems and practices should be replaced by 
secure systesss and practices, and a specific plan for such replacement 
should be established, 

d. Positive measures to effect such a plan should be introduced to 
the extent of providing, at least in part, the cryptographic devices and 
associated techniques essential to security. A survey is required to 
establish the number of machines that esa be loaned and the dates when 
they can be made available. 
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e. This will materially reduce the amount of intelligence now available 



to Russia from COMINT sources probably exploitable by them; 




f . Negotiations with the French should be so conducted and the plan 



so devised 

At a preliminary to entering upon any negotiations with the French 
there should be reasonable assurance that the effects of inproving their 
communication security will not be nullified or diminished by physical 
and pers o nnel insecurity in the French Government. It is obvious that 




4. It is reeossaended that: 

a. Enclosure "A" be approved as the specific plan for lnproveaent of 
French conramications. 

b. The U.S. and U.K. determine the nunber of machines that can be 
loaned and the dates when they can be made available. 
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1» The proposal presented herein for ensuring the security of French 
diplomatic ecEsmmications considers that the various French diplomatic posts 
should be subdivided into three categories* 

a# Category It A group of locations vfaich handle the most critical 
information and in considerable volte®, such as Paris, London, and 



Washington* 

b. Category II* All capitals not included in a» plus a selected 
group of important cities those coanunicationa include information which 



should have complete protection. 

c« Category III* All other diplomatic posts. 

Itfctes Thu flnrrrtfrAiA Hot of 32 of the French posts which should 
be included in Categories I and XI+A w. 



2. The systems reccmosnded, respectively, for the three categories 
listed above are* 

a. For Category I: The Cochined Cipher Machine with Simplex 
settings. The word slES>lex is usod to mean a procedure whereby each 
message has its own rotor arrangement and alignment provided by moons 
of a special Icqy list* The lists are prepared for point-to-point us© 
so that each station can decipher only those messages specifically 
addressed to it. For the transmission of multiple-address messages, a 



multiple holder Simplex key list is also provided* A one-time pad 
system should be provided as an emergency stand-by in this category. 
The number of locations that will be included in Category I will be 
determined by the number of equipments that can be made a va ilable. 

It is not yet possible to ascertain the nraber of machines that can be 
supplied for this purpose because of cocxltaents already made to MATO 
and the requirement for a survey in this regard by the Services* A 
small number of machines can be supplied initially to cover the most 
important locations. As the number of machines av ailab le increases, 
additional locations can be changed from category II to Category I* 
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The greater the number of posts viiich could be included in Gatogory Xj, 
tiio more single would become tho problem of integrated and multiple 
one-time pad networks for Category II posts* 

b. For Category II* A numerical code book si^er-mcsypied with 
one- time pad® It is recommended tliat a new code book be issued for 
tills specific purpose* 

c* For Category lilt Present French systems could continue to 
be used* 

3* ARLED SERVICES : 

3* Authorities concerned with NATO corsaunications haw abroad 
established three categories of such eonaaunicationa* 

a* Category I (High-level) : -This category cdbracos the top-lcvol 

military representatives of cadi nation of NATO© For this level, the 
British TYPES machine, with Simplex settings is being used* Considers.® 
tion ia being given to replacing that system by a IJATO GCU system* 
b* Category II (lntoraodiate«le(vel) * This category embraces 
military headquarters down to and including Division headquarters 02 ’ 
equivalent* For tills level tho U.S* and the U*IC* have already proposed 
the CXHa It has been accepted by France and the proposal is now to be 
considered by the other UATO governments. This does not however represent 
a complete solution to tho French Category II problem, because it does not 
provide for 2nd love! military headquarters .bote in France and her colonies * 
which are not included in UATO* I Jo estimate is available of how marry 
additional machines will be required in this regard B it seems clear that 
tee allowance for 2nd level NATO win be ^sufficient to supply tee 
ccsrplote French requirement* 

c« Category III* This is the combat level in tee Arcy, Navy and 
Air Forces Discussions at present taking place in UATO are osoamininc 
different proposals foe;'’ combat systems and to that extent may resolve e, 
portion of this general problem© It io recognised that the U-209 rosy bo 
accepted as an interim solution for this category duo to tee quantities' 
of equipment available to the French* 
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APPEUDIX TO EBCLQBBKB "A” 



PRIDGIF.IL LOCATiaiS TO BE IIJCXAJDT-^D III OATH milKS I AID II 



Ankara 
Athens 
Baden 
y Bangkok 
At Beirut 
/ Belgrade 
Berlin 
Bonn 
Brussels 
Cairo 

•a* Copenhagen 
-■** Damascus 
A Djakarta 
''7 Ihe llagua 
*# Lisbon 
7 London 
Uadrid 
llorocoo 
Uoscorr 
% Bow Doliii 
Ifevr York 
4# Oslo 
_ Paris 
* Rangoon 
Romo 

^ Saigon 
Singapore 
Jty- Stockholm 
Taipei 
Tol^o 
Vienna 
Washington 



Foreign Office only 

State Depar^enVtrQy 

/ y* 

y 









2. In regard to the current French diplomatic communications, observed 
French practices in cryptographic system design and distribution provide 
direct evidence that the present cryptographic organization in the French 
Diplomatic Service does not possess the necessary cryptanalytic appreciation 
to Insure provision of eye teas affording adequate cryptographic security, or, 
if it does possess the requisite knowledge, the information Is not being 
applied or properly employed, either in the Foreign Ministry or in diplomatic 
posts. Except as regards certain systems, which may be one-time pad, none 






of the Preach diplomatic cryptographic systems possesses sufficient inherent 

security to permit its imp ro ve ment to a point where it might be considered 

acceptable . It would therefore be necessary to discard the current systems 

and replace them with other systems based on sounder cryptographic principles. 

It would also be necessary to provide technically sound associated procedures 

and training in the proper use of the systems and procedures. pL 8 6-36/50 USC 3605 




4. Although a tradition of sound communication security doctrine did exist 
in France, the current cryptographic practices observed in French diplomatic 
traffic Indicate that the French have fallen far behind the U.S. and the U.K. 
in matters pertaining to coasunication security. The situation may be less 
serious In the Army end Havy but there, too, there is mush room for improvement, 
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Therefore, technical assistance from outside the French cryptographic services 
is deemed essential for the success of any communication security program. 

5. From an over-all consideration it may be stated that if the security 
of French diplomatic Jttetfy communications is to be improved it 'would. 



be necessary to: 



a. Replace the overrent F^&^h. cryptographic 
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with secure systems 



for use in all important diplomatic posts, aad - i n - the headqueartars-of all 

high-echelon 

b. Establish technically sound communication security procedures. 

c. Insure adequate training in the use of the new systems and procedures. 

d. Insure careful technical supervision over French ^ communications to 
maintain communication security. 



6. In view of the foregoing, it is apparent that in order to achieve total 
/^security, a complete overhaul of the French diplomatic and military crypto- 

j graphic systems and practices would be necessary. Ibis would involve not 

/ 

only informing the French that their present systems are insecure but also 
establishing a basis on which the French would be provided with ap pr op riate 
technical assistance to enable them to reorganize their cryptographic systems 



and practices to insure secure communications . 
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7. It is obvious that in assisting the French in improving the security 
of their cryptographic eo^mieatlons/ \ 



However, (a) the necessity 

for removing those handicaps to proper diplomatic discussions and negotiations 
sfflong the U.8., U.K, and French Governments which arise from present 
insecurity of French diplomatic commmications, and (b) the importance of 
denying to Russia this source of COME??, 



also to provide, at least in part, the cryptographic devices and associated 
techniques essential to security. 

ffo ' ’X 

8. If the French ere informed of the weaknesses of their cryptographic 

A 

systems, it is highly desirable that they be -g&m as little information as 
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9* The possibility of Russian pe n etration of some or all of the French 
services, both diplomatic and military, cannot be Ignored. Penetration may 

be either complete or partial, and may extend into either the sources of 

; EO 3.3(h)(2) 

Information or into the cryptographic services. Complete penetration 0 £ L86 ' 36/50 usc 3605 
either type would make totally ineffective any plan for iaproving crypto- 
graphic security. 



Therefore, before 



any steps are taken, there should be reasonable assurance of adequate physical 
and personnel security in the French Foreign Office, the French Armed Services, 
and tlte offices which control the cryptologic services. In addition to this, 
it is important that any plan proposed Should provide the maximum possible 
protection against the effects of partial penetration of either type. 



10. The localization introduced by Simplex procedures has a double advantage. 

ft 

First, it increases the cryptosecurity generally. An operating error will 
involve at most the comp romi se of one message as opposed to that of all the 
traffic sent In one day in a general cryptosystem. Secondly, if there should 
be an instance of penetration by the Russians at any installation, other than 
the central Paris offices, which grants access to cryptographic information, 
the dangers resulting from such penetration are confined to those cryptonets 
in which that installation Is involved. Shis results in reducing the consequent 
loss of Information. This second advantage applies equally to the one-time 



pad cry p ton ets. 
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11. Considerable experience on the part of the British (and particularly 
of the Foreign Office) In the field of one-tine pads has shorn that the 
implementation of complex one-tine pad n e t w o rks is entirely practicable . 



12. As regards production, by virtue of the fact that the British utilize 
to a nodi greater extent than the U.S., the former 
have carried out a series of ^^Igatlon. in the field of one-time 




itions in the field of one-time 



pad manufactory and have evolved improved processes, both on the duplicating 
and printing side and on the security aspects of the use of IBN/Hollerlth 
equipment, including such matters as the preparation, size, and control of 
the random card r 11 1 ||Di i i iimsn l h rifiSTii p^hm ii W T m nj mm i l i n i lui j i 
Share will haamsar be an important and major requirement to Instruct the 






■e will hmmmi iimMa^ 

very little versed In these uses of tabul ating machinery and hsree> at 






prese n t very little, if any, of the equipment available. Adequate detailed 
technical Instruction can nevertheless be given to the French technicians 
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13. The merit of the proposals in the Cryp tograp h ic Plan is the provision 
of a high degree of security for upper level French diplomatic and NASO 
communications, together with a minimum disclosure to the French of systems 
and ideas with which they are not already familiar. There is the further 

^ 1 '1 

operational advantage of an electrical machine to replace slower and more 
laborious hand systems. Far the transmission of international diplomatic 
or highest-level military traffic dealing with Western Union and NASO affairs, 
tin? have been provided with TEPEX machines and they are presently using a 



Simplex procedure with these machines in the highest echel on s of NATO; the 
Combined Cipher Machine is also being offered to them, as well as to other 
NASO signatories, for NATO ccsnuni cations and this has already been accepted 
by the French. Adequate training in the new systems will therefore be greatly 
simplified as a result of the already-existing familiarity with them. 
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15. With the exceptions mentioned in paragraph lh P the plan proposed in 
Enclosure "A" is a reasonable and economical program for providing adequate 



cryptographic security for the various levels of French diplomatic and 
military ccCTauiicatiens. She plan -will, if properly executed, effectively 
prevent the production of a significant msusit of communication intelligence. 
The plea is divided into two partsi A- For diplomatic cojsaainications, and 
3- For the eomssuai cations of the Armed Services. Fart B has been coordinated 
with the plan now under study by authorities concerned with SATO ccsmaunications . 
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